
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
File: nmoKpDnP40ewT3RoQKbkNMUJsac.mft (raw, json)
Hash identifier: Qe3EWhX/Kv5zV/ZK0ptR2f/lxmcOLNrAIPeDhIgSIY8=
Subject key identifier: A7:7A:1F:B8:FF:54:8F:A6:58:5F:91:63:E6:D0:3C:E0:0E:6E:23:E4
Authority key identifier: 9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7
Certificate issuer: /CN=A914DC56/serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
Manifest number: 0226
Signing time: Wed 09 Sep 2026 03:03:26 +0000
Manifest this update: Wed 09 Sep 2026 03:03:25 +0000
Manifest next update: Wed 16 Sep 2026 03:03:25 +0000
Files and hashes: 1: nmoKpDnP40ewT3RoQKbkNMUJsac.crl (hash: pJJYasDe2c296uhryN558B1tpudd7aLhGsPx9VbpT60=)
2: 11A843B467D811EEA0543B5CC4F9AE02.roa (hash: KWP1UBy8boz7pJPm05GmDW82fCp04v/CANctx4p0U0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl
rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 03:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DC56, serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7
Validity
Not Before: Sep 9 03:03:25 2026 GMT
Not After : Sep 16 03:03:25 2026 GMT
Subject: CN=6aa0cc7e-7f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f9:f1:04:1a:92:d7:b9:63:d2:e6:5a:7f:35:
78:74:84:c7:d7:3d:93:ab:c9:b3:27:a5:7c:0f:c5:
c7:92:63:4f:3b:55:f0:e9:77:73:e7:d0:32:37:0d:
b3:91:f0:23:fc:09:ba:58:a4:e7:0c:3e:62:5a:e7:
8a:23:94:85:e8:5a:06:2a:1a:99:44:05:fd:77:57:
05:e2:5e:51:40:dd:57:97:59:78:f2:c7:24:53:09:
b7:c9:d4:0b:6f:0f:0c:08:77:d2:65:d4:8f:65:26:
b2:be:f2:87:25:3a:74:e4:54:1a:d2:8e:77:f5:79:
41:62:54:3f:76:12:0c:c0:8d:52:bc:fa:5a:0c:a1:
ff:f9:d3:b8:62:9e:a8:ea:47:7a:35:59:cd:c9:c4:
b6:43:9b:45:43:e6:a4:7c:41:19:a6:ca:ce:3b:db:
cb:c3:5a:c7:5c:d3:7c:b0:36:c5:be:1b:52:f1:d4:
3c:cf:2f:2a:85:1e:60:c9:b3:06:01:a8:53:4a:97:
e0:71:89:6e:70:c9:7a:40:1a:ce:31:25:a3:fd:6f:
5f:35:9e:ad:fd:8b:c5:c8:0c:30:e5:01:38:64:65:
47:e2:b9:05:5d:60:d7:58:0e:94:92:c6:f1:05:16:
2a:f6:0c:f6:53:03:f7:57:2d:51:2d:b2:f2:6e:e9:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7A:1F:B8:FF:54:8F:A6:58:5F:91:63:E6:D0:3C:E0:0E:6E:23:E4
X509v3 Authority Key Identifier:
keyid:9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:68:0e:2d:d0:68:d7:0d:5b:8c:2f:98:59:f8:70:63:67:ce:
23:ba:93:07:70:2a:cf:83:5c:d3:d8:e6:67:c1:ed:d9:17:d0:
c4:16:e8:e1:30:a7:27:13:0a:ec:68:29:dd:2f:af:55:3b:7a:
91:45:d0:8c:5a:1d:02:21:f0:40:d2:39:e9:89:83:7b:d4:34:
16:09:d7:3d:33:72:dc:66:3d:c6:30:30:45:8b:da:fa:0b:81:
ac:89:a7:07:f4:e2:d2:cd:83:23:1e:3d:01:cb:35:45:51:71:
e4:42:89:80:db:a7:84:3e:5a:c9:05:8b:36:c4:4c:1e:c3:47:
0f:c9:6d:1b:23:82:49:61:97:2c:bd:d2:a0:d2:d2:47:87:32:
e6:88:f7:47:e9:ce:17:71:49:ab:67:e0:40:87:10:57:1e:9b:
fb:77:f5:65:dd:27:ab:af:14:44:19:9d:5d:5b:d7:4d:e8:77:
cf:98:4f:b0:da:f5:4c:c3:c6:f6:06:4e:b6:c6:37:f6:1c:7b:
af:88:1e:38:09:a3:f7:da:10:cf:19:1c:00:b4:56:1d:72:82:
40:de:a1:b3:84:9b:2e:52:48:f4:bb:1e:c7:eb:65:c8:75:b0:
fd:4c:54:06:1d:8e:11:a1:71:51:43:13:0e:f9:fe:a8:94:0e:
cc:ff:e4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:30:16 2026 by rpki-client